General
- Target acbfef21319c4a4cf5d0ea51cfa807b9acf9affaee325c60ef8b1e6ea62e631a
- Size 2.3MB
- Sample260801-k79fra1grc
- SHA256 acbfef21319c4a4cf5d0ea51cfa807b9acf9affaee325c60ef8b1e6ea62e631a
- MD5 59105aba1da88bf3cc11e237e0210c8d
- SHA1 48e1e2ebb4ec6d67ba0c45d72d352a27824a5007
- SHA512 2d38c9b9473207965d211e9ac6953e2432221303f3ce60a2c08b2bfe552efac979837b94abc2023d87ac1a5c46b387649c06df820ea122bd8b2349cca8770b2c
- SSDEEP 49152:jLN+GE3dLN+GE3HLN+GE3dLN+GE3revc18YsSg:jLN+G4LN+GaLN+G4LN+GMevc18fB
- TLSH T183B59E13F39084B2D02A193D5C6B52B9596A7EA12F19ACC73AE43D095F393D0393B397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
acbfef21319c4a4cf5d0ea51cfa807b9acf9affaee325c60ef8b1e6ea62e631a.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
acbfef21319c4a4cf5d0ea51cfa807b9acf9affaee325c60ef8b1e6ea62e631a.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target acbfef21319c4a4cf5d0ea51cfa807b9acf9affaee325c60ef8b1e6ea62e631a
- Size 2.3MB
- SHA256 acbfef21319c4a4cf5d0ea51cfa807b9acf9affaee325c60ef8b1e6ea62e631a
- MD5 59105aba1da88bf3cc11e237e0210c8d
- SHA1 48e1e2ebb4ec6d67ba0c45d72d352a27824a5007
- SHA512 2d38c9b9473207965d211e9ac6953e2432221303f3ce60a2c08b2bfe552efac979837b94abc2023d87ac1a5c46b387649c06df820ea122bd8b2349cca8770b2c
- SSDEEP 49152:jLN+GE3dLN+GE3HLN+GE3dLN+GE3revc18YsSg:jLN+G4LN+GaLN+G4LN+GMevc18fB
- TLSH T183B59E13F39084B2D02A193D5C6B52B9596A7EA12F19ACC73AE43D095F393D0393B397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2